diff --git a/docs/source/simplesamlphp-sp.xml b/docs/source/simplesamlphp-sp.xml
index 1a41e7f761f082ce4d3d0ebbdc5c352936d0eb78..80767bc355587dbe376afef30644ddbc5fc08822 100644
--- a/docs/source/simplesamlphp-sp.xml
+++ b/docs/source/simplesamlphp-sp.xml
@@ -546,6 +546,19 @@
             </glossdef>
           </glossentry>
 
+          <glossentry>
+            <glossterm>caFile</glossterm>
+
+            <glossdef>
+              <para>Alternative to certFingerprint. Allows you to specify a
+               file with root certificates, and responses from the service
+               be validated against these certificates. Note that
+               simpleSAMLphp doesn't support chains with any itermediate
+               certificates between the root and the certificate used to sign
+               the response.</para>
+            </glossdef>
+          </glossentry>
+
           <glossentry>
             <glossterm>icon</glossterm>
 
@@ -809,6 +822,18 @@
           </glossdef>
         </glossentry>
 
+        <glossentry>
+          <glossterm>caFile</glossterm>
+
+          <glossdef>
+            <para>Alternative to certFingerprint. Allows you to specify a file
+             with root certificates, and responses from the service be
+             validated against these certificates. Note that simpleSAMLphp
+             doesn't support chains with any itermediate certificates between
+             the root and the certificate used to sign the response.</para>
+          </glossdef>
+        </glossentry>
+
         <glossentry>
           <glossterm>icon</glossterm>